Account deletion

Under GDPR (Article 17), you can request deletion of your account and your personal data. Norcube provides a self-service deletion flow with a cooling-off window so an accidental click is reversible.

Request deletion

Open app.norcube.com → Account → Delete account.
Read the preflight checks. Deletion is blocked if you're the sole member of any organization – those orgs need to be deleted or transferred first.
Confirm. The request is queued.

Your account moves into pending deletion. You can still log in and use everything; the actual deletion happens after the cooling-off window.

The cooling-off window

During cooling-off:

You can still log in.
You can still use every product.
You can cancel the deletion at any time from Account → Delete account → Cancel deletion.

The window length is fixed; see the in-product dialog for the current value.

What happens after the cooling-off window

A worker runs and:

Nullifies your personal fields on the account row – name, email, password hash, avatar. The row itself stays (so historical audit records like createdBy don't break) but contains no PII.
Removes your organization memberships. Orgs you were a member of (but not sole member of) keep running with their other members.
For any org where you're the sole member, the org itself is deleted. See Organizations → Delete an organization.
Finalises open billing – outstanding usage is invoiced via your default card if one is on file.
Anonymises your Stripe customer record – your name and email are scrubbed; the customer entity is retained for tax-record compliance.

What's retained

For legal and audit reasons:

Invoices for the period required by tax law in your jurisdiction.
API access logs without bodies, per ops policy.
The anonymised user row without PII – needed so historical audit references don't break.

Everything else is permanently destroyed.

Org-only deletion vs account deletion

If you only want to drop one organization (e.g., a client account you're winding down), use Settings → Danger zone → Delete organization inside that org. Your account stays. See Organizations → Delete an organization.

Behaviour and edge cases

You can have only one pending-deletion request.
Multi-member organizations you sole-own block deletion. Transfer ownership first (manual support today) or delete the org.
The deletion can't be cancelled after the cooling-off window closes – once the worker runs, the personal data is gone permanently.

Data export – grab a copy of your data before deleting.
Organizations.